CVE-2005-2807 Privilege escalation in n/a

High 7.2 Published 7 Sep 2005 Updated 17 Sep 2024

Local attackers can read arbitrary files and potentially escalate privileges by exploiting improper privilege dropping in frox when running setuid root.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2005-2807?

CVE-2005-2807 is a high-severity vulnerability in n/a, published on 7 Sep 2005. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option.

Which versions are affected by CVE-2005-2807?

It affects 1 product.

Products include Frox Frox.

How do I fix CVE-2005-2807?

No fix has been published for CVE-2005-2807 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-2807 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-2807 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-395p-wxvj-rq46.